Re: exclude relay domains from unknown_domain check, but include

Martin Koeck wrote:
> After I finally understood what reject_unknown_recipient_domain does, I
> want the following:
> 1. exclude my relay (and local delivery) domains from reject_unknown*
> 2. but include it into my anti-spam options.
> 3. use reject_unknown* only when a MUA contacts me
>
> from my main.cf:
> ----------------
> smtpd_recipient_restrictions =
> reject_non_fqdn_sender
> reject_unknown_sender_domain
>
> permit_auth_destination

So this allows all inbound mail.

> reject_unknown_recipient_domain
>
> permit_mynetworks
> permit_sasl_authenticated
>

this then allows outbound and local mail.

> reject_unauth_destination
this denies relay.

what is left? nothing. so all the remaining lines are useless.

> check_helo_access hash:/etc/postfix/helo_checks
>
> check_recipient_access hash:/etc/postfix/roleaccount_exceptions
> reject_non_fqdn_recipient
> check_recipient_access hash:/etc/postfix/recipient_checks
> ## check_sender_access hash:/etc/postfix/sender_checks
> check_client_access hash:/etc/postfix/client_checks
>
> reject_invalid_hostname
> reject_multi_recipient_bounce
>
> reject_rbl_client ix.dnsbl.manitu.net
> reject_rbl_client relays.ordb.org
> ...
>
> This will do (1.) by permit_auth_dest*, but will EXCLUDE my relay- and
> local domains from any further anti_spam check ??
> So , would it be a solution to completely re-order things, in that I
> place anti-spam measures BEFORE permit_auth_destination ?
>
> TIA,
> Martin
>


remove permit_auth_destination